Bug#698541: zabbix: CVE-2013-1364: possible to override LDAP configuration parameters via the API

2013-01-19 Thread Salvatore Bonaccorso
Package: zabbix Severity: grave Tags: security Justification: user security hole -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, the following vulnerability was published for zabbix. CVE-2013-1364[0]: possible to override LDAP configuration parameters via the API If you fix the vulnerabili

Processed: found 683584 in 3.1.7-1

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 683584 3.1.7-1 Bug #683584 {Done: Daniel Pocock } [ganglia] ganglia: [Debian RT] CVE-2012-3448: arbitrary script execution There is no source info for the package 'ganglia' at version '3.1.7-1' with architecture '' Unable to make a source

Processed: found 608646 in wheezy/None, unarchiving 662897, found 662897 in wheezy/None, closing 662897 ...

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 608646 wheezy/None Bug #608646 [python-poker-stats] python-poker-stats: cronjob exits with error after package removal The source wheezy and version None do not appear to match any binary packages Marked as found in versions wheezy/None. >

Bug#696026: marked as forwarded (emacs24: file corruption on saving)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 22:09:28 -0600 with message-id <877gn8ijgn@trouble.defaultvalue.org> has caused the report #696026, regarding emacs24: file corruption on saving to be marked as having been forwarded to the upstream software author(s) bug-gnu-em...@gnu.org (NB: If you are

Bug#696026: emacs24: file corruption on saving

2013-01-19 Thread Rob Browning
(If possible, please preserve the *-forwarded address in any replies.) The following bug was reported to Debian. I've tested both the Debian emacs24 package, and current upstream emacs-24, as of: Author: Leo Liu Date: Sat Jan 19 02:35:44 2013 +0800 Prune erroneous values in dired-get

Bug#698490: git-effort: predictable /tmp filename

2013-01-19 Thread Rob Browning
Helmut Grohne writes: > On Sat, Jan 19, 2013 at 10:51:23AM -0600, Rob Browning wrote: >> Assuming I understood the situation correctly, this might be a plausible >> fix: > > Yes. Thanks for your quick reaction. You're certainly welcome, though it was just luck -- happened to be poking around the

Bug#687949: marked as done (sort_deps does not track package versions)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sun, 20 Jan 2013 02:47:43 + with message-id and subject line Bug#687949: fixed in debian-cd 3.1.11 has caused the Debian Bug report #687949, regarding sort_deps does not track package versions to be marked as done. This means that you claim that the problem has been dealt w

Bug#658352: marked as done (amd64 UEFI support)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sun, 20 Jan 2013 02:47:43 + with message-id and subject line Bug#658352: fixed in debian-cd 3.1.11 has caused the Debian Bug report #658352, regarding amd64 UEFI support to be marked as done. This means that you claim that the problem has been dealt with. If this is not the

Processed: poker-web: modifies a shipped file: /usr/share/poker-web/currency_one.php# ^^^ a magic version number for piuparts-analyze

2013-01-19 Thread Debian Bug Tracking System
Processing control commands: > found -1 wheezy/None Bug #698533 [poker-web] poker-web: modifies a shipped file: /usr/share/poker-web/currency_one.php# ^^^ a magic version number for piuparts-analyze The source wheezy and version None do not appear to match any binary packages Marked as found in

Bug#683584: [Pkg-monitoring-maintainers] ganglia update for Squeeze (CVE-2012-3448)

2013-01-19 Thread Daniel Pocock
On 20/01/13 00:02, Salvatore Bonaccorso wrote: > Hi Daniel, hi Yves-Alexis > > In short, [1] looks to be the only change needed for the security > update. So the debdiff I posted should be okay. But I will leave it to > Yves-Alexis (who is Debian Security Team member) which way to go. > > On Sa

Bug#683584: [Pkg-monitoring-maintainers] ganglia update for Squeeze (CVE-2012-3448)

2013-01-19 Thread Salvatore Bonaccorso
Hi Daniel, hi Yves-Alexis In short, [1] looks to be the only change needed for the security update. So the debdiff I posted should be okay. But I will leave it to Yves-Alexis (who is Debian Security Team member) which way to go. On Sat, Jan 19, 2013 at 10:15:00PM +0100, Daniel Pocock wrote: > On

Bug#698073: marked as done (texi2html: includes non-free documentation (GFDL with unmodifiable sections))

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 22:47:51 + with message-id and subject line Bug#698073: fixed in texi2html 1.82+dfsg1-1 has caused the Debian Bug report #698073, regarding texi2html: includes non-free documentation (GFDL with unmodifiable sections) to be marked as done. This means that y

Processed: severity of 697619 is important

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 697619 important Bug #697619 [src:linux] USB keyboard no longer works at initramfs passphrase prompt Severity set to 'important' from 'grave' > thanks Stopping processing here. Please contact me if you need assistance. -- 697619: http:

Bug#698463: marked as done (openarena-dbg: copyright file missing after upgrade (policy 12.5))

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 21:47:44 + with message-id and subject line Bug#698463: fixed in openarena 0.8.8-8 has caused the Debian Bug report #698463, regarding openarena-dbg: copyright file missing after upgrade (policy 12.5) to be marked as done. This means that you claim that the

Bug#698490: git-effort: predictable /tmp filename

2013-01-19 Thread Helmut Grohne
On Sat, Jan 19, 2013 at 10:51:23AM -0600, Rob Browning wrote: > Assuming I understood the situation correctly, this might be a plausible > fix: Yes. Thanks for your quick reaction. Helmut -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Troub

Bug#698527: elmer: executable ElmerGUI.real links with both GPL-licensed and GPL-incompatible libraries

2013-01-19 Thread Francesco Poli (wintermute)
Package: elmer Version: 6.1.0.svn.5396.dfsg2-1 Severity: serious Justification: Policy 2.3 Hello, this may sound like a revival of bug #618696 [1], but in fact it's distinct (although the evergreen OpenCASCADE GPL-incompatibility is still involved...). [1] http://bugs.debian.org/618696 Let's sta

Bug#698440: [DRE-maint] Bug#698440: ruby-rack: CVE-2012-6109 CVE-2013-0184 CVE-2013-0183

2013-01-19 Thread Youhei SASAKI
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear team member: (Cc: BTS, security team) I created cherry-picked patches from upstream, in order to fix these CVE issues and commit team git repository. Please review for upload. Vcs-Git: git://git.debian.org/pkg-ruby-extras/ruby-rack.git Vcs

Bug#683584: [Pkg-monitoring-maintainers] ganglia update for Squeeze (CVE-2012-3448)

2013-01-19 Thread Daniel Pocock
On 19/01/13 21:52, Salvatore Bonaccorso wrote: > Hi Daniel, hi all > > Ok let's try to reassume (I feel like there is some confusion ;-)) > > Squeeze currently has ganglia 3.1.7-1. So the updated package needs to > be based on this. Usually introducing a new upstream version is not > accepted f

Bug#683584: ganglia update for Squeeze (CVE-2012-3448)

2013-01-19 Thread Salvatore Bonaccorso
Hi Daniel, hi all Ok let's try to reassume (I feel like there is some confusion ;-)) Squeeze currently has ganglia 3.1.7-1. So the updated package needs to be based on this. Usually introducing a new upstream version is not accepted for security updates (an exception is e.g. mysql, where it seems

Bug#672524: bitcoin: FTBFS[any-i386]: testsuite errors

2013-01-19 Thread Petter Reinholdtsen
[Christoph Egger] > We'll see as soon as it builds on the buildds I'd say. Still fail. I am unable to understand why: g++ -c -DTEST_DATA_DIR=/build/buildd-bitcoin_0.7.2-2-i386-2MCUBL/bitcoin-0.7.2/src/test/data -DBOOST_TEST_DYN_LINK -O2 -pthread -Wall -Wextra -Wformat -Wformat-security -Wn

Bug#698292: marked as done (virtualbox: CVE-2013-0420)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 20:50:45 + with message-id and subject line Bug#698292: fixed in virtualbox 4.1.18-dfsg-2 has caused the Debian Bug report #698292, regarding virtualbox: CVE-2013-0420 to be marked as done. This means that you claim that the problem has been dealt with. If

Bug#695275: marked as done (src:dspam: harmful actions in multiple postrm scripts of M-A:same packages)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 20:47:50 + with message-id and subject line Bug#695275: fixed in dspam 3.10.1+dfsg-7 has caused the Debian Bug report #695275, regarding src:dspam: harmful actions in multiple postrm scripts of M-A:same packages to be marked as done. This means that you cl

Bug#683312: marked as done ([PATCH] uif uses depricated position of ! to negate rules)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 20:49:47 + with message-id and subject line Bug#683312: fixed in uif 1.0.6-1.1 has caused the Debian Bug report #683312, regarding [PATCH] uif uses depricated position of ! to negate rules to be marked as done. This means that you claim that the problem has

Processed: Bug#676424: emacsen-common: debian-startup puts items before /usr/local directories in load-path, violating policy

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > # oops... > fixed 676424 emacsen-common/2.0.5 Bug #676424 {Done: Rob Browning } [emacsen-common] emacsen-common: debian-startup puts items before /usr/local directories in load-path, violating policy Marked as fixed in versions emacsen-common/2.

Bug#683584: [Pkg-monitoring-maintainers] Bug#683584: security update ready for squeeze (3.1.8)

2013-01-19 Thread Daniel Pocock
On 19/01/13 21:01, Salvatore Bonaccorso wrote: > Hi > > On Sat, Jan 19, 2013 at 08:36:08PM +0100, Yves-Alexis Perez wrote: >> On sam., 2013-01-19 at 10:09 +0100, Salvatore Bonaccorso wrote: >>> By passing g= argument, it is possible to traverse the path and load >>> another file and execute code

Processed: reopen, pending 537051

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > reopen 537051 Bug #537051 {Done: Michael Shuler } [ca-certificates] ca-certificates 20090709: installation error 'reopen' may be inappropriate when a bug has been closed with a version; all fixed versions will be cleared, and you may need to re-a

Processed: owner 698073

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > owner 698073 ! Bug #698073 [src:texi2html] texi2html: includes non-free documentation (GFDL with unmodifiable sections) Owner recorded as Frank Lichtenheld . > thanks Stopping processing here. Please contact me if you need assistance. -- 698073

Processed: limit source to texi2html, tagging 698073

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > #texi2html (1.82+dfsg1-1) unstable; urgency=high > # > # * Repackage to remove GFDL documentation in tests/ directory > #which is not DFSG compatible (Closes: #698073) > # > limit source texi2html Limiting to bugs with field 'source' containi

Bug#676424: emacsen-common: debian-startup puts items before /usr/local directories in load-path, violating policy

2013-01-19 Thread Steven Chamberlain
Control: -1 found emacsen-common/2.0.5 Rob Browning writes: > So with the recent 2.0.5 upload, I believe the original problem may have > been fixed (/usr/local/ position in load-path). > > Accordingly, I think I'll close this bug. Had better also identify the fixed version, so that britney/UDD/

Bug#683584: security update ready for squeeze (3.1.8)

2013-01-19 Thread Salvatore Bonaccorso
Hi On Sat, Jan 19, 2013 at 08:36:08PM +0100, Yves-Alexis Perez wrote: > On sam., 2013-01-19 at 10:09 +0100, Salvatore Bonaccorso wrote: > > By passing g= argument, it is possible to traverse the path and load > > another file and execute code from it. > > > > Attached is the debdiff against 3.1.7

Bug#698231: memcached: CVE-2013-0179

2013-01-19 Thread Salvatore Bonaccorso
Hi Attached is a proposed debdiff for #698231. Any comments? Regards, Salvatore diff -Nru memcached-1.4.13/debian/changelog memcached-1.4.13/debian/changelog --- memcached-1.4.13/debian/changelog 2012-05-08 19:25:25.0 +0200 +++ memcached-1.4.13/debian/changelog 2013-01-19 20:37:32.00

Bug#683584: security update ready for squeeze (3.1.8)

2013-01-19 Thread Yves-Alexis Perez
On sam., 2013-01-19 at 10:09 +0100, Salvatore Bonaccorso wrote: > By passing g= argument, it is possible to traverse the path and load > another file and execute code from it. > > Attached is the debdiff against 3.1.7-1 in squeeze. Part of the diff (the is_numeric() parts mainly) seems missing.

Bug#664876: marked as done (ldc: Unsatisfiable dependency on libconfig++8)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 19:17:38 + with message-id and subject line Bug#664876: fixed in ldc 0.10.0-0~exp1 has caused the Debian Bug report #664876, regarding ldc: Unsatisfiable dependency on libconfig++8 to be marked as done. This means that you claim that the problem has been de

Bug#697666: [pkg-mt-om-devel] Bug#697666: movabletype-opensource: mt-upgrade.cgi vulnerability

2013-01-19 Thread Yves-Alexis Perez
On mar., 2013-01-08 at 18:04 +, Dominic Hargreaves wrote: > Security team, shall I upload to security-master? Yes, please. > > It might be useful in a DSA to recommend restricting the > mt-upgrade.cgi > script to trusted IP addresses, but I don't think it's something we > can do by default, a

Bug#653328: marked as done (calibre: Calibre Quick Start Guide under Non-Commercial License)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 18:32:31 + with message-id and subject line Bug#653328: fixed in calibre 0.8.51+dfsg1-0.1 has caused the Debian Bug report #653328, regarding calibre: Calibre Quick Start Guide under Non-Commercial License to be marked as done. This means that you claim tha

Processed: found 655922 in wheezy/None, unarchiving 663444, found 663444 in 5.1.7-1, found 663444 in wheezy/None ...

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 655922 wheezy/None Bug #655922 [distributed-net] distributed-net: noninteractive install: postinst loops infinitely The source wheezy and version None do not appear to match any binary packages Marked as found in versions wheezy/None. > una

Bug#689268: Intel HD 4000 (Ivy Bridge) graphics freeze

2013-01-19 Thread Vincent Blut
> Am 10.01.2013 09:39, schrieb Riku Voipio: > > > getting hangs on anything other than the Debian 3.2.32-1 has > > been challenging. If if's just timing based, I might just have > > been lucky during my bisects. > > Here vanilla 3.4.24 from kernel.org runs absolutely stable since a few > weeks. B

Bug#697210: closing 697210

2013-01-19 Thread David Paleino
close 697210 thanks JOSM 5608 cleared the NEW queue, and is now available (or soon will be!) in unstable. Kindly, David -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Processed: closing 697210

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > close 697210 Bug #697210 [josm-plugins] josm-plugins: Cannot build with version of josm in unstable Marked Bug as done > thanks Stopping processing here. Please contact me if you need assistance. -- 697210: http://bugs.debian.org/cgi-bin/bugrep

Bug#537051: ca-certificates: Unneeded and confusing usage of interest-noawait

2013-01-19 Thread Michael Shuler
On 01/19/2013 10:41 AM, Guillem Jover wrote: > As discussed in 537051 the NMU introduced an unneeded and confusing > usage of interest-noawait, and the accompanying Pre-Depends on dpkg. > The attached patch removes these. Thanks for the patch. I'll get this tested out as soon as I can and get an

Bug#688634: roundcube sqlite -> mysql transition hint

2013-01-19 Thread Chris Knadle
On Saturday, January 19, 2013 09:02:56, Holger Levsen wrote: > Hi Chris, Hi Holger. > thanks for your howto. Much appreciated! > > cheers, > Holger It's a start. If I find anything better I'll be sure to pass it along. -- Chris -- Chris Knadle chris.kna...@coredump.us -- To UNSUBS

Processed: bug 698231 is forwarded to https://code.google.com/p/memcached/issues/detail?id=306

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 698231 https://code.google.com/p/memcached/issues/detail?id=306 Bug #698231 [memcached] memcached: CVE-2013-0179 Set Bug forwarded-to-address to 'https://code.google.com/p/memcached/issues/detail?id=306'. > thanks Stopping processing he

Bug#696228: marked as done (graphite-carbon: logrotate and internal carbon log rotation interact badly)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 17:17:32 + with message-id and subject line Bug#696228: fixed in graphite-carbon 0.9.10-3 has caused the Debian Bug report #696228, regarding graphite-carbon: logrotate and internal carbon log rotation interact badly to be marked as done. This means that y

Processed: tagging 698231

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 698231 + patch Bug #698231 [memcached] memcached: CVE-2013-0179 Added tag(s) patch. > thanks Stopping processing here. Please contact me if you need assistance. -- 698231: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698231 Debian Bug T

Bug#686764: [Pkg-xen-devel] Bug#686764: xen: Multiple security issues

2013-01-19 Thread Jonathan Wiltshire
On Sat, Jan 19, 2013 at 12:57:58PM +0100, Bastian Blank wrote: > On Fri, Jan 18, 2013 at 12:15:04PM -, Jonathan Wiltshire wrote: > > Recently you fixed one or more security problems and as a result you closed > > this bug. These problems were not serious enough for a Debian Security > > Advisor

Bug#676424: marked as done (emacsen-common: debian-startup puts items before /usr/local directories in load-path, violating policy)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 10:25:59 -0600 with message-id <87ehhhru49@trouble.defaultvalue.org> and subject line Re: Bug#454778: Bug#676424: Bug#454778: emacsen-common: load-path order vs debian-run-directories has caused the Debian Bug report #676424, regarding emacsen-common: debian

Processed: Re: git-effort: predictable /tmp filename

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tag 698490 +patch Bug #698490 [git-extras] git-effort: predictable /tmp filename Added tag(s) patch. > thanks Stopping processing here. Please contact me if you need assistance. -- 698490: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698490

Bug#698490: git-effort: predictable /tmp filename

2013-01-19 Thread Rob Browning
tag 698490 +patch thanks Assuming I understood the situation correctly, this might be a plausible fix: >From 679c67c615947b44aafa969f00ea00f9ed997e4e Mon Sep 17 00:00:00 2001 From: Rob Browning Date: Sat, 19 Jan 2013 10:44:34 -0600 Subject: [PATCH 1/1] Create git-effort temp file via mktemp and

Bug#537051: ca-certificates: Unneeded and confusing usage of interest-noawait

2013-01-19 Thread Guillem Jover
Hi! As discussed in 537051 the NMU introduced an unneeded and confusing usage of interest-noawait, and the accompanying Pre-Depends on dpkg. The attached patch removes these. Thanks, Guillem From 3593dbf704952575294b44dbd97d3026ed7429f2 Mon Sep 17 00:00:00 2001 From: Guillem Jover Date: Sat, 19

Bug#696360: nvidia-glx: Sporadic X freezes

2013-01-19 Thread Andreas Beckmann
Control: tag -1 moreinfo On 2012-12-22 18:32, Mar Mel wrote: > * I have tested the 304.64-2 driver from unstable and experienced the exact > same > behavior of freezing. I also built a vanilla 3.4.24 kernel from upstream with > only the Wheezy config options and tested this using the Wheezy 304.4

Processed: Re: Bug#696360: nvidia-glx: Sporadic X freezes

2013-01-19 Thread Debian Bug Tracking System
Processing control commands: > tag -1 moreinfo Bug #696360 [nvidia-glx] nvidia-glx: Sporadic X freezes Added tag(s) moreinfo. -- 696360: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696360 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to de

Processed: geda-gaf: diff for NMU version 1:1.6.2-4.3

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 694015 + pending Bug #694015 [geda] geda: copyright file missing after upgrade (policy 12.5) Added tag(s) pending. > thanks Stopping processing here. Please contact me if you need assistance. -- 694015: http://bugs.debian.org/cgi-bin/bugrep

Bug#694015: geda-gaf: diff for NMU version 1:1.6.2-4.3

2013-01-19 Thread gregor herrmann
tags 694015 + pending thanks Dear maintainer, I've prepared an NMU for geda-gaf (versioned as 1:1.6.2-4.3) and uploaded it to DELAYED/2. Please feel free to tell me if I should delay it longer. Regards. -- .''`. Homepage: http://info.comodo.priv.at/ - OpenPGP key 0xBB3A68018649AA06 : :' : D

Bug#698231: memcached: CVE-2013-0179

2013-01-19 Thread Arno Töll
On 19.01.2013 16:16, Salvatore Bonaccorso wrote: > > The only thing is if Release Team is happy with it to have it updated > as it is (i.e. native Debian package). Yes, my bad. I wasn't careful enough with that as 1.0 packages make it pretty easy to produce a native package accidentally. I'll ask

Bug#692053: Iceweasel

2013-01-19 Thread Samuel Wolf
I have the same problem on amd64, iceweasel stop responding and eating 100% cpu for few seconds. Linux samuel 3.2.0-4-amd64 #1 SMP Debian 3.2.35-2 x86_64 GNU/Linux iceweasel 10.0.12esr-1 -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Troubl

Bug#698115: marked as done (dcap and dicom3tools: error when trying to install together)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 16:33:29 +0100 with message-id and subject line Re: has caused the Debian Bug report #698115, regarding dcap and dicom3tools: error when trying to install together to be marked as done. This means that you claim that the problem has been dealt with. If this is

Processed: Re:

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > fixed 698115 1.0~20121227-1 Bug #698115 [dicom3tools,dcap] dcap and dicom3tools: error when trying to install together There is no source info for the package 'dcap' at version '1.0~20121227-1' with architecture '' Marked as fixed in versions di

Bug#698231: memcached: CVE-2013-0179

2013-01-19 Thread Salvatore Bonaccorso
Hi Arno On Sat, Jan 19, 2013 at 03:21:39PM +0100, Arno Töll wrote: > looking at the current upload history, I don't think the current > maintainer will prepare a patch for s-p-u. Salvatore, given you asked > yesterday: Are you working on this? > > If nobody steps in, I'll NMU the version in unsta

Processed: Re: geda: copyright file missing after upgrade (policy 12.5)

2013-01-19 Thread Debian Bug Tracking System
Processing control commands: > found -1 1:1.6.2-4.2 Bug #694015 {Done: gregor herrmann } [geda] geda: copyright file missing after upgrade (policy 12.5) Marked as found in versions geda-gaf/1:1.6.2-4.2; no longer marked as fixed in versions geda-gaf/1:1.6.2-4.2 and reopened. -- 694015: http://

Bug#687947: wims: still modifies shipped files: /var/lib/wims/public_html/gifs/*

2013-01-19 Thread Georges Khaznadar
Andreas Beckmann a écrit : > not much has changed in the last release ... therefore reopening. Thank you for the feedback, Andreas! I wish I could install piuparts to get this feedback sooner; however it failed when I tried to get the package and install it last time. I think that the next packag

Bug#698231: memcached: CVE-2013-0179

2013-01-19 Thread Arno Töll
Hi, looking at the current upload history, I don't think the current maintainer will prepare a patch for s-p-u. Salvatore, given you asked yesterday: Are you working on this? If nobody steps in, I'll NMU the version in unstable at very least, although I cannot promise this will happen within the

Bug#690151: Stable upload request - Fw: Bug#690151: claws-mail: CVE-2012-4507

2013-01-19 Thread Ricardo Mones
On Sat, 19 Jan 2013 12:43:02 + "Adam D. Barratt" wrote: > On Fri, 2013-01-18 at 20:20 +, Adam D. Barratt wrote: > > On Fri, 2013-01-18 at 20:08 +0100, Ricardo Mones wrote: > > > As requested by Jonathan, I've prepared an upload with the minimal > > > changes required for fixing this, de

Processed: Re: Re: [Pkg-openldap-devel] Bug#673038: Bug#673038: slapd: slapcat output truncated every now and then

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 673038 techni...@openldap.org Bug #673038 [slapd] slapd: slapcat output truncated every now and then Set Bug forwarded-to-address to 'techni...@openldap.org'. > thanks Stopping processing here. Please contact me if you need assistance.

Bug#673038: Re: [Pkg-openldap-devel] Bug#673038: Bug#673038: slapd: slapcat output truncated every now and then

2013-01-19 Thread Balint Reczey
forwarded 673038 techni...@openldap.org thanks Hi, I have forwarded the problem to techni...@openldap.org but it has not yet appeared in the list archive. It worth noting that there exists a script [1] in ldap-git-backup which can be used for backing up LDAP databases more reliably. Cheers, Bal

Bug#688634: roundcube sqlite -> mysql transition hint

2013-01-19 Thread Holger Levsen
Hi Chris, thanks for your howto. Much appreciated! cheers, Holger -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#684810: marked as done (rgl: FTBFS: types.h:98:5: error: 'copy' was not declared in this scope, and no declarations were found by argument-dependent lookup at the point of instantiation [-fpermiss

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 13:33:08 + with message-id and subject line Bug#684810: fixed in rgl 0.92.798-1+deb7u1 has caused the Debian Bug report #684810, regarding rgl: FTBFS: types.h:98:5: error: 'copy' was not declared in this scope, and no declarations were found by argument-dep

Processed: patch

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 658896 patch Bug #658896 [sudo] sudo: setresuid(ROOT_UID, ROOT_UID, ROOT_UID): Operation not permitted Added tag(s) patch. > thanks Stopping processing here. Please contact me if you need assistance. -- 658896: http://bugs.debian.org/cgi-b

Processed: unionfs-fuse: diff for NMU version 0.24-2.2

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 698129 + patch Bug #698129 [unionfs-fuse] unionfs-fuse: Depends on fuse-utils; uninstallable in sid Added tag(s) patch. > tags 698129 + pending Bug #698129 [unionfs-fuse] unionfs-fuse: Depends on fuse-utils; uninstallable in sid Added tag(s

Bug#698129: unionfs-fuse: diff for NMU version 0.24-2.2

2013-01-19 Thread Ansgar Burchardt
tags 698129 + patch tags 698129 + pending thanks Dear maintainer, I've prepared an NMU for unionfs-fuse (versioned as 0.24-2.2) and uploaded it to DELAYED/5. Please feel free to tell me if I should delay it longer. Regards. diff -Nru unionfs-fuse-0.24/debian/changelog unionfs-fuse-0.24/debian/ch

Bug#696262: marked as done (bitcoin FTBFS: tests fail assuming a RW $HOME)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 13:00:06 + with message-id and subject line Bug#696262: fixed in bitcoin 0.7.2-2 has caused the Debian Bug report #696262, regarding bitcoin FTBFS: tests fail assuming a RW $HOME to be marked as done. This means that you claim that the problem has been deal

Bug#696051: marked as done (potential guest-side buffer overflow caused by e1000 device emulation and large incoming packets - CVE-2012-6075)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 12:47:06 + with message-id and subject line Bug#696051: fixed in qemu 0.12.5+dfsg-3squeeze3 has caused the Debian Bug report #696051, regarding potential guest-side buffer overflow caused by e1000 device emulation and large incoming packets - CVE-2012-6075

Bug#696051: marked as done (potential guest-side buffer overflow caused by e1000 device emulation and large incoming packets - CVE-2012-6075)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 12:47:04 + with message-id and subject line Bug#696051: fixed in qemu-kvm 0.12.5+dfsg-5+squeeze10 has caused the Debian Bug report #696051, regarding potential guest-side buffer overflow caused by e1000 device emulation and large incoming packets - CVE-2012

Bug#690151: marked as done (claws-mail: CVE-2012-4507)

2013-01-19 Thread Debian Bug Tracking System
Your message dated Sat, 19 Jan 2013 12:47:25 + with message-id and subject line Bug#690151: fixed in claws-mail 3.7.6-4+squeeze1 has caused the Debian Bug report #690151, regarding claws-mail: CVE-2012-4507 to be marked as done. This means that you claim that the problem has been dealt with.

Bug#690151: Stable upload request - Fw: Bug#690151: claws-mail: CVE-2012-4507

2013-01-19 Thread Adam D. Barratt
On Fri, 2013-01-18 at 20:20 +, Adam D. Barratt wrote: > On Fri, 2013-01-18 at 20:08 +0100, Ricardo Mones wrote: > > As requested by Jonathan, I've prepared an upload with the minimal changes > > required for fixing this, debdiff attached. [...] > In any case, please go ahead; thanks. Flagge

Bug#698497: Missing license information

2013-01-19 Thread Luca Falavigna
Source: beast-mcmc Version: 1.6.2-3 Severity: serious src/dr/math/matrixAlgebra/RobustSingularValueDecomposition.java seems derived from COLT 1.2, whose license can be found at http://acs.lbl.gov/software/colt /colt-download/releases/license.html Please consider adding information to copyright fi

Processed: Re: Bug#696460: tag #599523 wheezy-ignore

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 599523 + wheezy-ignore Bug #599523 [update-manager-gnome] [update-manager-gnome] wants to downgrade packages without any notice Added tag(s) wheezy-ignore. > user release.debian@packages.debian.org Setting user to release.debian@pack

Bug#688634: roundcube sqlite -> mysql transition hint

2013-01-19 Thread Chris Knadle
I'm also using roundcube-sqlite, so I'm going to have to deal with the transition to either roundcube-mysql or roundcube-pgsql. I found some hints from someone that did the transition from sqlite -> mysql back in 2007: http://www.howtoforge.com/forums/showpost.php?p=70929&postcount=3 Below

Processed: closing 688231, closing 595593, closing 502753

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > close 688231 Bug #688231 [acgvision-agent] acgvision-agent: modifies conffiles (policy 10.7.3): /etc/acgvision/agent.ini Marked Bug as done > close 595593 Bug #595593 [fossology] fossology: fails to install Marked Bug as done > close 502753 Bug #

Bug#686764: [Pkg-xen-devel] Bug#686764: xen: Multiple security issues

2013-01-19 Thread Bastian Blank
On Fri, Jan 18, 2013 at 12:15:04PM -, Jonathan Wiltshire wrote: > Recently you fixed one or more security problems and as a result you closed > this bug. These problems were not serious enough for a Debian Security > Advisory, so they are now on my radar for fixing in the following suites > thr

Processed: notfound 688231 in None, found 688231 in sid/None, found 688231 in wheezy/None, unarchiving 502753 ...

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > notfound 688231 None Bug #688231 {Done: Andreas Beckmann } [acgvision-agent] acgvision-agent: modifies conffiles (policy 10.7.3): /etc/acgvision/agent.ini There is no source info for the package 'acgvision-agent' at version 'None' with architect

Bug#683584: security update ready for squeeze (3.1.8)

2013-01-19 Thread Salvatore Bonaccorso
Hi Daniel Thanks for you followup! Even better if you (or someone else of pkg-monitoring team) can do the security upload: On Sat, Jan 19, 2013 at 11:22:47AM +0100, Daniel Pocock wrote: > Just following up on this > > - - I've added pkg-monitoring-maintain...@lists.alioth.debian.org to the > CC,

Bug#698490: CVE needed?

2013-01-19 Thread Henri Salo
Hello, Does this issue have CVE-identifier? I am happy to request one if there isn't one yet. - Henri Salo -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Processed: tagging 698442, found 689121 in 5.10.1-1+squeeze1, found 689332 in 1:9.7.3.dfsg-1~squeeze9 ...

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 698442 - moreinfo + upstream Bug #698442 {Done: Andreas Beckmann } [nvidia-glx] nvidia-glx: X11 corrupt/slow after switching to console or suspend/resume Removed tag(s) moreinfo. Bug #698442 {Done: Andreas Beckmann } [nvidia-glx] nvidia-glx

Bug#698490: git-effort: predictable /tmp filename

2013-01-19 Thread Helmut Grohne
Package: git-extras Version: 1.7.0-1.1 Severity: serious Tags: security The git-effort utility uses /tmp/.git-effort as the name of its temporary filename. While this already prevents two users from using this utility (due to not cleaning its temporary file) it also allows for targeted symbolic l

Bug#683584: security update ready for squeeze (3.1.8)

2013-01-19 Thread Daniel Pocock
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 19/01/13 10:09, Salvatore Bonaccorso wrote: > Hi Yves, > > On Mon, Jan 07, 2013 at 09:32:48PM +0100, Yves-Alexis Perez wrote: >> On lun., 2013-01-07 at 09:11 +0100, Daniel Pocock wrote: >>> On 07/01/13 07:27, Yves-Alexis Perez wrote: On lu

Processed: merge duplicate bug reports

2013-01-19 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forcemerge 624241 697561 Bug #624241 [update-manager-gnome] update-manager-gnome: [CRASH] Uncaught exception ZeroDivisionError in Frontend/Gtk/GtkProgress.py:688 Bug #598994 [update-manager-gnome] [CRASH] Uncaught exception ZeroDivisionError in

Bug#683584: security update ready for squeeze (3.1.8)

2013-01-19 Thread Salvatore Bonaccorso
Hi Yves, On Mon, Jan 07, 2013 at 09:32:48PM +0100, Yves-Alexis Perez wrote: > On lun., 2013-01-07 at 09:11 +0100, Daniel Pocock wrote: > > On 07/01/13 07:27, Yves-Alexis Perez wrote: > > > On lun., 2013-01-07 at 00:35 +0100, Daniel Pocock wrote: > > > > > >> Yes, the 3.1.8 security fix from ups